CVE-2004-0735

CVE-2004-0735 describes a stack-based buffer overflow in the getinfo command of Medal of Honor Allied Assault (and related Breakthrough/Spearhead versions) that enables remote code execution over UDP. Public exploit/publication artifacts exist (Metasploit module, PacketStorm release) and link to ...

CVE-2004-0735: Undefined Security Weakness

Buffer overflow in Medal of Honor 1 Allied Assault 1.11v9 and earlier, 2 Breakthrough 2.40b and earlier, and 3 Spearhead 2.15 and earlier, when playing on a Local Area Network LAN, allows remote attackers to execute arbitrary code via vectors such as 1 the getinfo query, 2 the connect packet, and...

CVE-2004-0391

Cisco Wireless LAN Solution Engine WLSE 2.0 through 2.5 and Hosting Solution Engine HSE 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration...

[NEWS] SMC Routers Passwordless Remote Administration

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

[Full-Disclosure] Zonet ZSR1104WE Router problem

Zonet ZSR1104WE Router does not report inbound connections with their WAN ip address. All inbound connections are posted as the routers LAN address. This issue is a simple one. The ZSR1104WE router with the listed firmware / hardware will not report an inbound TCP/IP connections WAN address. We...

CVE-2004-0391

Cisco Wireless LAN Solution Engine WLSE 2.0 through 2.5 and Hosting Solution Engine HSE 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration...

CVE-2004-0391

CVE-2004-0391 affects Cisco WLSE (Wireless LAN Solution Engine) versions 2.0–2.5 and HSE (Hosting Solution Engine) 1.7–1.7.3, which contain a hardcoded username and password. The root cause is hardcoded credentials allowing remote attackers to add new users, modify existing users, and change conf...

CVE-2004-0391: Undefined Security Weakness

Cisco Wireless LAN Solution Engine WLSE 2.0 through 2.5 and Hosting Solution Engine HSE 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration...

Cisco WLSE and HSE devices contain hardcoded username and password

Overview A default account with a common username and password exists in two Cisco products. An attacker with knowledge of this account information can compromise any of these devices on the network. Description A default account with a known, fixed username and password combination exists in som...

CVE-2004-0337

The CVE-2004-0337 entry documents a cross-site scripting vulnerability in LAN SUITE Web Mail 602Pro. An attacker could craft a URL to index.html with a trailing slash and script payload to execute arbitrary script/HTML as another user. The vendor notes the bug could not be reproduced, leaving unc...

CVE-2004-0335

CVE-2004-0335 affects LAN SUITE Web Mail 602Pro when the “Directory browsing” feature is enabled. A remote attacker can obtain a directory listing by requesting (1) index.html, (2) cgi-bin/, or (3) users/ via HTTP. The vulnerability allows partial confidentiality impact with network access and lo...

CVE-2004-0337

Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...

CVE-2004-0335

LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...

CVE-2004-0335: Undefined Security Weakness

LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...

CVE-2004-0337: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...

Nortel Wireless LAN Access Point 2200 Series - Denial of Service

// source: https://www.securityfocus.com/bid/9787/info Nortel Wireless LAN Access Point 2200 series appliances have been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when a large network request is handled by one of the Wireless LAN...

LAN SUITE Web Mail 602Pro Multiple Vulnerabilities

Application: LAN SUITE Web Mail Server: WEB602/1.04 Vendors: Software602, Inc http://www.software602.com Versions: 602Pro Platforms: Windows Bug: Directory Listing, Local Path Disclosure and Cross Site Scripting Risk: Medium Exploitation: Remote with browser Date: 28 Feb 2004 Author: Rafel Ivgi,...

Software602 602Pro LAN Suite - Web Mail Cross-Site Scripting

source: https://www.securityfocus.com/bid/9777/info It has been reported that 602Pro LAN Suite Web Mail is prone to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user input supplied via the URI. Attackers may exploit this vulnerabilit...

Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage

source: https://www.securityfocus.com/bid/8700/info A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentially sensitive information. http://www.example.com/mail/S030904L.LOG...

Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage

Software602 602Pro LAN SUITE 2003 - Sensitive User Information Storage source: https://www.securityfocus.com/bid/8700/info A problem with the storage of user credentials has been identified in Software602 602Pro LAN SUITE 2003. Because of this, an attacker may be able to gain access to potentiall...